● Available — Free for Government
TRACE
Traceable Risk, Artifact & Control Evaluation.
TRACE analyzes compliance evidence, maps it to NIST SP 800-53 Rev. 5 controls, identifies gaps, and generates valid OSCAL artifacts. Dual license: free for government agencies and non-profits, commercial license for all others.
📄 Multimodal Evidence Analysis
Upload policies, procedures, SSPs, screenshots, diagrams, or configuration files. TRACE analyzes the evidence and maps it to relevant controls.
🗺️ NIST SP 800-53 Mapping
Automatically maps analyzed content to NIST SP 800-53 Rev 5 controls. Identify which controls are addressed and which are missing.
🔍 Gap Analysis
Surfaces controls not addressed by your current documentation. Understand what is missing before an assessor tells you.
📤 OSCAL Output
Export findings in machine-readable OSCAL format — compatible with FedRAMP automation tools and OMB mandates.
📊 Validation Reporting
Generates structured validation reports showing document coverage, confidence scores, and evidence citations.
🏛️ Free for Government
Dual-licensed: completely free for U.S. federal agencies, state/local government, and registered non-profits.
Who Is This For?
🏛️ Government Agencies
Map your existing policy library to NIST controls automatically. Free license — no procurement required.
💼 Compliance Consultants
Accelerate document review engagements. Upload client documents and get a NIST control coverage map in minutes.
🏢 Commercial Organizations
Understand your compliance posture across your documentation inventory. Commercial license available.